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(54) System for controlling the use of a software item 

(57) A system is described for controlling the use of 
a software item, such as a program or data, in a compu- 
ter network, comprising at least one server and a plural- 
ity of local computers, each of the local computers 
having means for downloading an item from a server to 
the local computer. The system comprises means for 
controlling access to the downloaded item, so that the 
provider of the item keeps control over a downloaded 
item. 
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Description 

[0001] The present invention relates to a system for 
controlling the use of a software item, such as a pro- 
gram or data in a computer network, in particular the s 
Internet 

[0002] Currently Internet providers have hardly any 
control over the information they provide on the Internet. 
Generally two services are available on the Internet, a 
standard service which is available to everybody who 10 
can access the Internet, and a premium service, for 
which a subscription is required. However, after the ini- 
tial set-up of the access right to the service, there is no 
control over the information that is downloaded to the 
local computer. is 
[0003] The invention aims to provide a system allow- 
ing flexible control over the programs or data provided 
on the computer network. 

[0004] According to the invention a system is provided 
for controlling the use of a software item, such as a pro- 20 
gram or data, in a computer network, comprising at 
least one server and a plurality of local computers, each 
of said local computers having means for downloading 
an item from a server to the local computer, said system 
comprising means for controlling access to the down- 25 
loaded item. 

[0005] The invention will be further explained by refer- 
ence to an embodiment which advantageously uses the 
fact that most web browsers support object embedding 
in a web page. Object embedding allows a small pro- 30 
gram to execute inside the display space of the browser. 
In the present system an object is used which can 
decrypt encrypted information and can allow access to 
this decrypted information based on the rights of the Claims 
user. The web content provider encrypts the content he 35 
wishes to protect. The content may be a program, data 1 . 
or another type of information. The encrypted informa- 
tion is embedded in the web page(s) using conventional 
web authoring tools. The web pages are placed on a 
web server in a usual manner. Web users can access 40 
the web server using their standard browser on their 
local computers. 

[0006] When a user requests a web page from a 
server that contains encrypted information, the web 2. 
page will be downloaded to the local computer and 45 
embedded in this web page is an object which can 
decrypt the encrypted information. Further, this object 
includes instructions to retrieve the encrypted informa- 
tion from the server so that the encrypted information is 
downloaded to the local computer. To decrypt and so 3. 
access the data, a key is distributed to the users and 
this key is used by the object to decrypt the information. 
The means for distributing a key can distribute different 
keys and by the management of these keys, the type of 
access to the encrypted information can be controlled, ss 4. 
For example, a first key will allow the user only to view 
the data on his display. A second key can be used to 
allow the user to store the encrypted information in 



decrypted form in his local computer. A third key can be 
provided to allow the user to print the information. In this 
manner the information provider keeps full control over 
the information downloaded in the local computers. 
[0007] As an alternative or in addition to the above- 
described embodiment, a program may be embedded 
in the information and this program will automatically 
make a connection to the server from which the infor- 
mation has been downloaded as soon as the user tries 
to access the information. If the program cannot make a 
connection to the server, access to the information will 
not be allowed. As an alternative this program may 
allow access to the information a predetermined 
number of times only. Further the program can deter- 
mine the type of access, such as viewing, printing, 
restoring etcetera. 

[0008] The system may include a program at the 
server which as soon as a connection between the local 
computer and the server has been made, addresses 
this local computer and controls the access to the infor- 
mation depending on the rights of the user of this local 
computer. 

[0009] It is noted that for encryption and decryption of 
the information, existing encryption/decryption algo- 
rithms can be used. Further, for the management of 
keys, existing technology in the field of pay TV can be 
used. By way of example it is noted that during down- 
loading a web page and/or during each connection 
between server and local computers entitlement man- 
agement and entitlement control messages can be for- 
warded to the local computers to manage the access to 
the information. 



System for controlling the use of a software item, 
such as a program or data, in a computer network, 
comprising at least one server and a plurality of 
local computers, each of said local computers hav- 
ing means for downloading an Hem from a server to 
the local computer, said system comprising means 
for controlling access to the downloaded item. 

System according to claim 1, wherein said control- 
ling means comprises means for encrypting the 
item, means for distributing a key to local comput- 
ers and means for decrypting the encrypted item by 
means of said key. 

System according to claim 2, wherein said distribut- 
ing means can distribute different keys, said keys 
determining the type of access to the encrypted 
item. 

System according to any one of the preceding 
claims, wherein said controlling means comprises 
means for automatically contacting the server from 
which the item has been downloaded in case the 
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Hem is accessed, and means for preventing access 
to the item if said contacting means is not able to 
contact the server. 

System according to claim 4, wherein said control- s 
ling means allows access to the item for a predeter- 
mined number of times only. 

System according to claim 4, wherein said control- 
ling means comprises means for addressing a local to 
computer when the item is accessed and means for 
controlling the type of access to the item. 
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